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[57] ABSTRACT 

A method and a circuit limit access to a locked portion 
of memory to periods when application program in- 
structions in the locked portion of memory are being 
executed. _An JJN LQCK routine of processor instruc- 
tions is executed before accessing the portion of the 
memory storing the application program instructions 
and a LOCK routine of processor instructions is exe- 
cuted to re-secure the memory after such access. The 
locking and unlocking is accomplished by addressing a 
comparator and transmitting data representing either a 
lock value or an unlock value. The comparator is con- 
nected to enable and disable decoding circuitry which 
in turn controls access to the locked portion of memory. 

10 Claims, 2 Drawing Sheets 
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includes the steps of (a) generating a selected address to 
METHOD AND CIRCUIT FOR LIMITING ACCESS enable a comparator and (b) generating predetermined 
TO A RAM PROGRAM MEMORY data to the comparator to enable decoding circuitry. 

The processor subsequently generates addresses 
BACKGROUND OF THE INVENTION 5 within the selected range of addresses to the decoding 

1. Technical Field circuitry to generate a circuit control signal to the mem- 
The field of the invention is electronic controllers for ory, the circuit control signal enabling the memory for 

controlling industrial machines and processes, and more access in response to such addresses. This allows access 

particularly processor-based circuit board modules used to a protected portion of the memory that was not ac- 

in such equipment and controllers, 10 cessible prior to executing the UNLOCK routine. 

2. Description of the Background Technology and The method further includes executing a LOCK rou- 
Related Art tine of processor instructions after accessing the pro- 
Industrial controllers are typically connected to as- tected portion of the memory, including the steps of (c) 

sembly line equipment and process control equipment in generating the selected address to enable the compara- 
manufacturing facilities and other industrial plants. 15 tor a second time, and (d) generating data to the corn- 
Smaller controllers, including programmable control- parator other than the predetermined data to disable the 
lers, have typically been built as a set of modules that decoding circuitry. This prevents further access to 
are inserted in a rack somewhat like a set of books memory within the selected range of addresses without 
placed side-by-side in a bookcase. These modules may re .£ X ecuting the UNLOCK routine of processor in- 
include a main processor (CPU) module, communica- 20 structions. 

tion modules and I/O interface modules. , A„circuit for practicing th e method o LtheJnvientio n 

The main processor module (CPU) typically includes includes a DroC esso r forTxecuting a n UNLOCK routine 
a microprocessor or microcomputer and a prograrnma- ^j^5i5n5555ctioM and f&lJSutinTa LOCK 
ble read-only memory (PROM) for storing operating ^ of ~ processor instructions whic h are stored in an 

system instructions to be read and executed by the mi- 25 j t ^ PROM as part of the operating system firm- 
croprocessor. The module ware. The portion of the memor? which is locked is 

memory (RAM) for storing data and application pro- . , , . . ~i „i r 

grams. Over the years the other modules have become enabled b V a c °™° 1 signal .from decoding 

peripheral processor modules with their own processor, circuitry, but only when the decoding circuitry receives 
PROM and RAM. These modules have been pro- 30 a memory addressing enable signal which is controlled 
grammed to perform many specialized control func- by a comparator. 

tions under the general supervision of the main proces- Qtthen jhe processor executes the UNLOO jCroutme, 
sor (CPU) module. il addresses the comparator mrough the" decodingc ir- 

Where many different application programs are to be c uitry at aj glected addres s "38000" (hexadecimalTThe 
stored and executed, it is desirable to store and execute 35 processor also generates! nyte oi predetermined aaia 
them in random access memory (RAM). This allows " 55" (hexadecimal) to the comparator, which then g en- 
convenience in loading, testing and debugging such e rates the memory address ing enap j e . SlKTl ft Lfla£K_to the 
programs. decoding Circu itry. Thp riecrtriing circuitry then enables 

The invention herein relates to a specialized I/O the po rtion of> mffmo r Y which stores appli cation pro- 
module with a detachable RAM cartridge. Application 40 ^m3r^tnjjcT?ons with a memory circuit control sig nal 
programs can be developed in a higher-level language s o that this portion of memory can be accessed ? 
with off-line development systems and entered in the "After executing the application program instruction, 
cartridge. When the program has been developed, the t he processor executes the LOCK routine of processor 
cartridge may then be carried to a certain location in a instructions, to again address the comparator at the 
factory and installed in the processor-based module in a 45 predetermined address "38000". This time, however, 
programmable controller system. tne processor generates data other than "55" (hex). The 

In such an arrangement, there is a need to prevent the comparator responds to this other data to remove the 
processor from writing data to locations in the RAM, mem ory address enabling signal which disables the 
except when the processor is actually executing the memory circuit enabling signal to the memory and pre- 
application program. This helps assure the integrity of 50 yents further acce£S tQ until thc next cycle of execution 
the program, which may then be readily reproduced Qf thft tjnlqcK routine of processor instructions, 
where it is desired to use it in another machine or pro- Qne Qbject of ^ invention ^ t0 rotect a portion of 
vide a duplicate cartridge Thus when background mem from unintended overw riting of its contents, 
operations are being executed, the RAM program mem- mention is more specifically applied to preventing 

ory a .inaccessible or "locked out" agamst access by its 55 ^ from ^ ^ tQ J progra * 
associa ed processor. memory except for periods when application program 

SUMMARY OF THE INVENTION instructions in the memory are being executed. 

The invention is incorporated in a method and a cir- Another object of the invention is to limit access to 
cuit for preventing access and allowing access to a 60 «he the protected portion of memory by executing a 
locked portion of memory. The invention can be ap- ver V short routme of instructions that will not slow 
plied wherever it is desired to 'limit the ability of a pro- overall execution of the operating system firmware or 
cessor to access a random access memory or to access application programs. 

an application program memory. Another object of the invention is to provide an ac- 

The method includes executing an UNLOCK routine 65 cess protection method and circuit for a portion of a 
of processor instructions before accessing a portion of memory storing user application programs, 
the memory which is addressable within a selected Another object is to provide an access protection 
range of addresses. Executing the UNLOCK routine method and circuit for a detachable RAM cartridge. 



06/02/2004, EAST Version: 1.4.1 



5,027,317 

3 4 

These and other objects and advantages of the inven- The first 32k memory circuit includes 24k addresses 

tion will be apparent from the following description, in within the range of addresses mentioned above for un- _ 

which reference is made to the accompanying draw.- limited access an d 8k_addresses within the ra nge for ^ r>^v~> 

ings, which form a part hereof, and in which there is ljmite djtccess. The second ana thira J2k memory cir- ^ ^ 

shown by way of example a preferred embodiment of 5 cuits have 'all addresses within the range for limited 

the invention. This example does not necessarily repre- access. 

sent the full scope of the invention, however, and refer- To read and write information to and from the RAM 

ence is therefore made to the claims for detennining the 14 ( read, write, output enable and chip select (RAM 

various embodiments within the scope of the invention. RD/WR, RAM 0E and RAM CS) -s ignals must be 

BRIEF DESCRIPTION OF THE DRAWINGS 10 tramm^ ^ 

RAM RD/WR memory control signal is transmitted on 

FIGi 1 is a block diagram of a microprocessor-con- a ram RD/WR line from a RAM control line decod- 

trolled circuit for practicing the method of invention; mg circuit 21 to a RD/WR input on the RAM memory 

and circuits. The set of lines for ^cjie-ja^noryL xircuit has 

FIG. 2 is a block diagram of additional subcircuits in 15 been'show n with it being understood that there is a_ 

the microprocessor-controlled circuit for practicing the s imilaTseTToTThe second and thirdTSAM memory cV 

method of invention. cuits. During a read cycle, the signal At the RD input on 

DETAILED DESCRIPTION OF THE thSifccled portion of RAM 14 is at a logic high level. ^ 

PREFERRED EMBODIMENT , n Dming a write cyc i e tn i s signal is at a logic low. A 

. RAM OE signa l is transmitte d during readcyclgs to a 

FIG. 1 illustrates a microelectronic processor circuit d aia-Ql5puTTnable input on the memory'^iredts. A 

in a single-axis motion control I/O module for a pro- r am CS (chip set s igna l) is Transmitted t o a chip 

grammable controller. In the preferred embodiment the e Sa bie (CEL input on thememorv circuits for both read 

CPUjri a MC68QQ8 microprpcesspr available from Mo- a j£Write cycles " 

toj pla Smififfflfli i Rtor Pro d ucts , Inc . T^ processor 25 ^jhTCPV 10 is also connected through the higher 

operates internally as a 32-bit processor, but communi- ordef ^ AU . A19 Qf hs addfess bu$ n XQ g p A ^ 

cMestoojte r nm n tTY throu g h an fi-hit frta bus. Its addres$ ^ Mt . $ fcrabl a 20L8 _ A2 

^Bp^maim set opera ion and use with —^ mmable lo ^ c dfcuit available from Mono . 

? CnP ^!LT UUS 1S 11 deScnbed m ht f ratU rt rC av t S" c , n lithic Memories. The addresses at which the CPU- 10 

fr0ffi - M f^ 30 communicates with other circuits can be programmed 

^^rfff 1 ^^^ ^ «im»u .innino at * ^to the PAL address de~co^^^ a"delirld 

The CPU 10 is driven by timing signals running at a — - i . «_ . j * Tc : — 

frequency of 10 Mhz. from a clock circuit (not shown). ?* of-enable^gnals^ to other circuitry 
The CPU 10 is connected via lines A0:A19 of an « res P onse CPU addresses or a range of CPU ad- 
address bus 12 and linesX>0:D7 of an eight-bit wide data 35 as u sl S ned t0 * hat CIXC ^ Programm,ng_me^ 
bus 13 to communicate with other circuitry in the mod- qdsforjb^ 
ule including an erasable programmable read-only ig»ufiaOT 

memory (EPROM) 11, This circuit is preferably a JS^in=the.ait ^ m ^ t „ . ,1^ 

27C101G 128kX 8-bit EPROM available from Hitachi tg ^^ 1 ^^^^^^ " " ™ n W f*"X ^*/3v 

or Fujitsu. This EPROM 11 stores the operating system 40 thg^ujliaEPROM EN (gPRpM enable) output on. the, } ^ 0*\*^ 

firmware instructions for the CPU 10, including startup PAk^^a nd t^ROj^gto a hk jme 22 wto / 

routines and many service routines for handling typical the CPU gen^ / 

microcomputer operations. The EPROM 11 is ad- aadfesses^jg^o to tne aiTOKTg; .T^e^MM*-- 

dressed at locations 00000-iFFFF (hex) in the memory enabledjyhen^^ generates an address within the 

addressing range of the CPU 10. 45 tv ^ a ngesoTCPU dqdieAse jglsi ffied to the RAM _as 

The CPU 10 also connects through lines A0:A14 of discussed above. And the other circuits are enabled/ 

the address bus 12 and through lines D0:D7 of the data when the CPU 10 generates addresses withm a fourth 

bus 13 to a random access memory (RAM) 14 which is ran g e of addresses. » 

located in a detachable cartridge as represented by the In this fourth range of addresses the PAL address 

phantom lines. In the preferred embodiment this mem- $0 decoder 15 is assisted in addressing circuits at individual 

ory has 96k bytes of capacity with 72k bytes available addresses through several 3-to-8-line decoders 16, the 

for user application programs written in a higher-level one of interest being illustrated in FIG. 1. Lines A10- 

motion control language. The RAM memory 14 com- :A12 of the address bus connect to binary-coded data 

prises three 32k X 8-bit static random access memories inputs "1", "2" and "4" on the decoder 16. 

available from Hitachi. 55 When the decoder 16 is enabled at three enable inputs 

The RAM -14 is addressable in two portions at tw o and when binary number "000" is transmitted on ad- 
ad'3ressingrang es. The first portion is always accessible dress lines A10:A12 to the decoder ,16, a low-true out- 
unlimited access) andJs-addressa bleat locations 20000 put signal is transmitted from the "0" output of the 
to 2 5FFF (hexadecgn aD, This 24k-byte portion is used decoder 16 to an enable input (Gl) on a comparator 18 
^fofgeneral purpose storage of data which the CPU 10 60 and also to a clock (C) input on a D-type Hip-flop (F-F) 
utilizes in executing any instructions including its oper- 19. This signal and the line transmitting it have been 
ating system program or application programs, ^sec- designated the RAM LOCK CS signal and RAM 
ond portion is locked against access flirnif*"* g ? n f a ss) LOCK CS line, respectively. 

e lcept as described belo wT This 72k-byte portion is The decoder 16 has three enable inputs (&). A first 

addressed at locations 46000-57FFF (hexadecimal) in 65 high-true input is pulled up to a +5-volt logic high 

the CPU addressing-MngelljOiris^xample, this portion signal and is always enabled. A second, low-true enable 

oftfre RAM 14 is the user aj ^lication^ rogi^^ input is connected to receive an enable signal from the 

wHich"store^al)plicaficir^rogram instructions. EN2 output on the PAL decoder IS. 
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A third enable input, also low-true, receives an enable an address from the CPU 10 is in the unlimited access 
signal for every bus cycle initiated by the CPJJ 10. The x range or the limited access range. This is because one of 
CPU 10 has several control lines, specified in the litera- \ the memory circuits is subdivided into an unlimited 
ture on the MC68008, which carry control signals dur- / access portion and a limited access portion, 
ing each bus cycle (read cycle or write cycle). These * The RAM CE signal is transmitted from the PAL 
control signals are coupled through CPU bus cycle ^ decoder 15 to the RAM controUm^codine circuit ^ 1 
control circuit 17 to enable the other input on the de- jua^esponsT-to . ad dresc e s ^ -boOll^g^^ 
coder 16 each time address or data is transmitted on the range and in thejmjim jteri a cces s range/The RAM CE 
address and data buses 12 and 13. s|gnaUnglthe^^ strobe IAS)jign^recomb^ 

T h~ p^rmrfltnr 18 has a set of "P" data inputs con- 10 to gen erate RAMC S (chip selej^Xsigrjals^Ji^ 
^w^Jv^ nectei Uo lines D0:D7 of the data bus 13 to recede a (Cgmpuls^nlEe^m 
> \ byte of data. The comparator 18 has a set ot n Q ?r data these^gn^^ the state_of the 

inputs con nected as shown by block 20 to a +5-volt E NI input on the PALdw^eT3rcuit 15. 
supply voltage and to ground to receive a byte of logic WtenlET'^ratpu^^ 19 goes low in 

high and low signals in the pattern "0101 0101". This 15 response to data "55" at the comparator 18, the enable 
binary value translates to the hexadecimal value "55'\ input EN1 on the PAL decoder 15 is enabled. This 
When the data at the "P" inputs is also "55", and pro- allows write signals to be generated to the limited ac- 
viding the comparator is enabled at input Gl, a match is cess portion of theJ*AMJ4^ the 
detected and a logic low signal is transmitted from the RAMTWXSrjinSPwEie^^ 
output (P=Q) to a D input on the flip-flop 19. The 20 addresses i n the limited access addressing jangftdging 
comparator 18 is preferably an HCT688 available from C PU write cycles. Th eJPAL^decod er 15 i ncl u dfisJogic 
RCA or Signetics. The flip-flop 19 is preferably an circui try thafw ould_allow data to be read fromj&e 
HCT74 available from RCA or Signetics, li mited access portion of RA jvU^ith4he^sable^ig- 

The flip-flop 19 has a low-true set (S) terminal con- nal present at inpuJ^NI, prov^dedjh^ 
nected to receive a low-true RESET signal on power- 25 programn^to-Te^^ 

up from a power-up/reset circuit associated with the the-fe*M-Q=2 CS l il ies ^e-mNc^m ns£ElL^^ 
RAM memory 14 in the detachable cartridge. This sets c^cies^hiit noTaunng CPi£wjdte^c4e^^ 
th e "Q" output on the flip-flop 19 to a logic high. A fter s^gnaUuhL^NJiD^ a 
po wer-up. the RESET signal goes high and the re set wntejignaLaU^ the 
(K fmput is pulled up to a + 5-volt log ic hlgh~si| nal, 30 memorxci rcuits and to a portion of the tju rdjnemory 
whTch_allowsItE Mtput^^ circuit. ^ 

-^re41ed4>v-th^sig nals at the "C" and "D" inputs. When To enable the comparator 18 to receive the data- 55^, 
a logic low signalisreceived at the "D" input from the or other data, at its 'T'Unpuls^j heCPU 10 gener ates"^ ^ 
P=Q output on the comparator 18, and when a low-to- the addre ss "38(X)0"(hexadeama^^ 
high transition signal (the trailing edge of a logic low 35 Tliis aUmbti-liaiiAl<rreTto the binary pattern "0011 1000 
pulse) is received at the "C" input through the RAM 0000 0000 0000". Thus, logic "IV are transmitted on 
LOCK CS line, the flip-flop 19 is switched to provide a address lines A15, A16 and A17, and logic "0V are 
logic low signal at its U Q" output. This signajjs^sent transmitted on the address lines A0:A14 and A18:A19. ^^rX^ 
back to the PAL decode r 15 to e nable a memory ad- This logical input to the PAL decoder 15 generates a >p 
dressin g enablelnput (EN1). TrnTlnput cont rols" the 40 signal from the EN2 output to enable decoder 16. At the / 
abUltyto write data to the limit^dacces^p^dirof the same time, decoder 16 is receiving "000" on lines A10- 

. RAMr — ~~ ' t0 enable the„comparator_18~through- the-RAM 

/^TTdata other than "55" is sent to the comparator, LOCK CS line. The. comparator 18 is thus addressed 
V J whSnTHs^a^-armr^^ the flip- and" enabled at CPU address "38000" (hex). The sdatai V.o^ 

)^ \ flop c 19^?IIl pTngir and the PAL decodei 15 will be 45 that is transmitted on data bus 13 to address 38000 l^vi 

\ disabled at i nput EN1. This disables the abilityTowHte will be compared with the number "55!l(hexadecirnal) f x 
\ data to the limited access portion of the RAM memory to lock or unlock access to the RAM through the PAL 
N 14 decoder 15. *S 

The enabling of the EN1 input on the PAL decoder The locking and unlocking of access to the limited \ 
15 ^ntrolsthe_gnablmg of th Tlca^rO^-CS^iires in 50 access portion of the RAM 14 is under the control of I. \o<S fl 
*-7esponse=to^a^^ range of the CPU 10, which executes these functions in response *T MU xJ^aA^ 

^m^mpry^dresses. Signals on the RAM 0-2 CS lines are to a UNLOCK subroutine of processor instructions 23 ' 
logically combined with the memory write (WR), ad- stored in the EPROM 11 and in response to a LOCK 
dress strobe (AS) and data strobe (DS) signals from the subroutine of processor instructions 24 stored in the 
CPU 10 to generate the RAM RD/WR signals and the 55 EPROM 11. J 
RAM OE (output enable) signals to the memory cir- The_UNLO^ 

cuits in the RAM 14. before accessin g the RAM to execu te each user apphca- 

When theENLinput is nolenabled, lines RAM 0-2 tion-gfi>gi^ The 
CS are not enabl ed for writmg _to,addrisses4n-the^im- application progranL^trucUons are wnttenm a" high- 
ited access range. In this state, the RAM 1 CS signals 60 er-leveLianguager-compiled-and then stored m the 
'and^RAMTCS sig nals cannot be en abled for the pur- RAM 14. TheJLOCK-subroutine jsxalled^nd executed 
T^e'Jjfwri^^ M. after accessing the RA Mjoexecute each user applica- 

THS prevents write signals from being transmitted on nionprogram instruction. 

the~RAM~RD^R^i5«Ioj^^ Calls-to the UNLOCK and LOCK subroutines are 

inYhe RAM 14, and consequently no data or informa- 65 placed in a number of higher-level task routines exe- 
tion of any type can be written to this portion of the cuted by the CPU 10. These higher-level task routines 
&AM 14. Active signals may be jransmitted on t he include tasks for executing user application instructions 
RAM.QjCSl&TtFcircuit ' 2rdepinding upon whether and tasks for communicating with peripheral devices. 
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The following is an example of such a routine, which is 
executed in conjunction with a handheld programming 
device to execute user program statements either one- 
at-a-time (single step) or in short sequences. The "break- 
point" is a point in the user application program, where 
execution is stopped, for purposes of monitoring and 
debugging the user application program. 

TABLE 1 



8 

-continued 



lock— ramO; 



The first statement calls the UNLOCK subroutine, 
the second instruction executes the next user application 
programming statement and the third instruction exe- 
cutes the LOCK subroutine. The UNLOCK subroutine 
is listed in Table 2 below. 



TABLE 2 



UNLOCK SUBROUTINE 
(68000 assembly language) 



Label/Instruction . 



Comment 



c. unlock— ram 




movca.1 curtcb,a0 


; point to task control 




byte for current task 


raoveq #ID_ERR,dO 


; set error return status 


cmp.b # UNLOCK VAL,RAMSTAT(aO) 


; verify if already 




unlocked 


beq.s was__unJocked 


; branch on unlock value 


to was_ unlocked 


moveq #OK,d0 


; setup OK return status 


move.b #UNLOCKVAL,RAMSTAT(a0) 


; mark ram as enabled 


was_unlocked 




movcb #UNLOCKVAL,RAMLOCK 


; signal hardware to 




unlock ram 


rts 


; return from subroutine 



AT—BREAKPOINT TASK EXECUTION ROUTINE 
(C programming language) 

Comment: This routine calls the procedures to 
execute a user programming statement depending on 
the type of stmt —signals. If the signal is 
irrelevant it is ignored. At the end, it sets any 
new state for statement execution tasks. 



# include 

# include 
^include 

# include 

# include 
extern int 
extern void 
extern void 
extern void 
int 



{ 



<stdio.h> 
"sysdefs.h" 
"system— variables .h" 
"signals.h" 
"stmt.h" 
gct_cventO; 

execute_app— prog— statemen tO; 
unlock— ramO; 
lock— ramO; 
at— breakpoint— transO 
int_stmi_signals; 

stmt— signals = get event (RES_STMT_ EXEC); 
wait— list.run = FALSE; 

Spgm status = running; 

unlock— ramO; 

execute— app_prog_statementO; 
lock ramO; 

return (T5—PROCESS); 
break; 

case CONT_STMT_EXEC: 

if (step_brk_cnt+ + step— brk_ lrat) 
{ step— brk_ cnt — 0; 
releaseQ; 

} 

wait— list.run = FALSE; 
Spgm— status — running; 
unlock— ramO; 

execute— app— prog— statementO; 
lock— ramO; 

stmt— state = T5_PROCESS 

break; 
default: break; 
> 

return {stmt— state); 
} 



In the above routine, there are two occurrences of the 
following sequence; 



unlock— ramO; 

execute— app— prog— statementO; 



When the UNLOCK subroutine is called a first in- 

30 struction, seen in Table 2 above, is executed as seen 
above to set up an address in register "aO" that will 
point to a byte of RAM status-dataJn-a-task.control 
block for the task or se quence being executed by the 
l _JZFmfft. EacluaKlOiaTTtr^ data 

35 structu re and the RAM status data fo r each task is 
stG*ed4a^e4ativeiy-t5e-s^ by 
register aO ) within this block. The lo cked/unlocked 
.statusuaf li he RAM U is siCT ,fie,dJbyJhe^RAM status 
daja^jst&red^nJthe^ja sk control bloc k. 

40 Next, the CPU It executes a second instruction to set 
up an "ERROR" return status, should the CPU 10 have 
to exit the subroutine prematurely and before the RAM 
is unlocked for access. Register "dO" in the CPU 10 is 
assigned to hold data which is checked on return from 

45 the subroutine. The data is referred to as "#ID.ERR" 
which is some predetermined constant. 

The CPU 10 then executes a third instruction to com- 
pare^-the-R AM sta tu&jd ata in the task control block 
pojntedjoj>y^e£iste^ 

50 for #UNLOCKVAL . which has been determined to be 
"55 " (hexadecimal). If the unlock value is present, the 
CPU 10 branches to a "was.unlocked" sequence. Cor- 
rective action is required because the memory is not 
supposed to be unlocked and accessible at this point in 

55 the subroutine. If the RAM status is "unlocked*' at this 
point in the subroutine, the single instruction in the was 
unlocked sequence is executed to transmit the constant 
"#UNLOCKVAL" ("55") to the RAMLOCK address 
(38000 hex). This unlocks the RAM 14 so that the RAM 

60 status will be correct. 

Assuming the check of RAM status shows it not to be 
unlocked (any other data than "55"), the error status is 
changed to OK in the fifth instruction. In the sixth 
instruction, the unlock value "55" is loaded in the RAM 

65 status data in the task control word. The CPU. 10 then 
proceeds to the instruction under the was unlocked 
label to transmit the constant "#UNLOCKVAL" 
("55") to the RAMLOCK address (38000 hex). The 
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CPU 10 then executes a return instruction to return to 
the AT.BREAKPOINT task. 

Referring back to Table 1, after the UNLOCK sub- 
routine is executed, the CPU 10 has access to the user 
application instructions and data in the RAM and exe- 5 
cutes the next user application instruction ("execute, 
app.prog -statementO")- This is followed by execution of 
the LOCK subroutine to disable access to the RAM 14 
until the next unlock-execute-lock sequence. 

The LOCK subroutine is listed in Table 3 below. io 

TABLE 3 

LOCK SUBROUTINE 
(68000 assembly lanuage) 



Label/Instruction Comment 



clock ram 




movea. 1 curtcb.aO 


; point to task control 




byte for current task 


move.b #LOCKVAL,RAMSTAT(aO) 


; mark ram as dis- 




abled 


move.b #LOCKVAL,RAMLOCK 


; signal hardware to 




lock ram 


rts 


; return from sub- 




routine 



15 



20 



The LOCK subroutine includes four instructions. 
The first instruction is executed to set up the pointer to 25 
the RAM status data in the task control block. The CPU 
10 then executes the second instruction to move a pre- 
determined constant "#LOCKVAL" 0*57") into the 
RAM status data in the task control block to signify that 
the RAM 14 is in the locked status. The CPU 10 then 30 
executes the third instruction to transmit the constant 
"#LOCKVAL" ("57") to the RAMLOCK address 
(38000 hex). Because this data is other than "55" it will 
cause the comparator 18 to set the "Q" output of flip- 
flop 19 to a logic high and disable the EN1 input and CE 35 
output on the decoding circuit 15. As explained above 
this will prevent access to the RAM 14. The CPU 10 • 
then executes a return instruction to return to the task 
being executed prior to the subroutine call. 

FIG. 2 shows a further aspect of the present inven- 40 
tion. If the CPU 10 attempts to write to a limited access 
portion of the RAM 14, when it is locked, a bus error 
will be generated. This bus error cycle is initiated when 
a write operation is attempted to an address in the lim- 
ited access range and an address is received at the PAL 45 
decoder 15 with the EN1 input disabled by the UN- 
LOCK RAM (L) signal. 

The PAL decoder 15 has one output connected 
through a DTACK EN line to a DTACK generator 
circuit 25. The DTACK generator circuit 25 transmits 50 
a DTACK (data acknowledge) signal to a DTACK 
input on the CPU 10 to end each bus cycle provided 
that the DTACK generator circuit 25 is enabled by the 
DTACK enable signal. 

At the beginning of each bus cycle, the CPU 10 gen- 55 
erates a data strobe (DS) signal, mentioned earlier, to a 
bus error timer circuit 26. This circuit 26 includes an 
LS123 retriggerable multivibrator (not shown) and a 
HCT74 flip-flop (not shown) to latch the output of the 
multivibrator. This is typical timing circuit known in 60 
the art. 

The receipt of the DTACK signal by the CPU 10 will 
end the current bus cycle and a data strobe (DS) signal 
will be de-asserted at the bus error timer 26 to reset it 
before it times out If the DTACK signal is not re- 65 
ceived, due to the lack of a DTACK EN signal, the bus 
error timer 26 will time out and generate a signal to the 
bus error (BERR) input on the CPU 10. This will cause 
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the CPU 10 to jump to an error interrupt routine in its 
operating system program to process the error. 

This has been a detailed description of a preferred 
embodiment of the invention, The invention can also be 
practiced with certain modifications of a type that are 
understood by those of ordinary skill in the art. There- 
fore, to apprise the public of the scope of embodiments 
contemplated by the invention, the following claims are 
made. 

We claim: 

1. A method of limiting access to a memory by a 
processor, the method comprising: 

before performing an application program operation, 
executing an UNLOCK routine of processor in- 
structions to allow writing of data to a limited 
access portion of the memory; 

wherein execution of the UNLOCK routine includes 
the steps of: 

(a) generating a selected address to activate a com- 
parator to perform data comparison, and 

(b) generating predetermined data to the comparator 
for matching against a predetermined value to acti- 
vate decoding circuitry; 

during an application program operation, executing 
at least one instruction to address the decoding 
circuitry within a selected range of addresses to 
generate a circuit control signal to the memory, the 
circuit control signal allowing writing of data to 
the limited access portion of memory; and 
after the application program operation, executing a 
LOCK routine of processor instructions to prevent 
writing of data to the limited access portion of the 
memory; 

wherein execution of the LOCK routine includes the 
steps of: 

(c) generating the selected address to activate the 
comparator a second time, and 

(d) generating data to the comparator that does not 
match the preset value so as to disable the decoding 
circuitry and prevent further writing of data to the 
limited access portion of memory without further 
execution of the UNLOCK routine of processor 
instructions. 

2. The method of claim 1, wherein execution of the 
UNLOCK routine further comprises the steps of: 

(e) checking a memory status word to determine if 
the limited access portion of the memory is already 
unlocked for writing of data, 

(f) if the memory status word defines an unlocked 
status, performing steps (a) and (b) to confirm the 
status of the limited access portion of the memory; 

(g) if the memory status word defines a locked status, 
changing the memory status word to define an 
unlocked status, and then performing steps (a) and 
(b) to permit writing of data to the limited access 
portion of the memory; and 

wherein execution of the LOCK subroutine further 
comprises the steps of: 

(h) changing the memory status word to define a 
locked status, and 

(i) performing steps (c) and (d) to prevent further 
writing of data to the limited access portion of 
memory. 

3. The method of claim 1, wherein the circuit control 
signal generated to the memory includes a write enable 
signal for writing data to the memory. 
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4. The method of claim 1, wherein the limited access 
portion of the memory is within a selected range of 
addresses and stores application program instructions. 

5. The method of claim 1, wherein the memory is a 
random access memory. 

6. A circuit for controlling access by a processor to a 
limited access portion of a memory having a selected 
range of addresses, the circuit comprising: 

means for storing (1) an UNLOCK routine of proces- 



out further execution of the UNLOCK routine of 
processor instructions. 

7. The circuit of claim 6, wherein the limited access 
portion of memory stores application program instruc- 
tions. 

8. The circuit of claim 6, wherein the comparison 
means is a comparator circuit for comparing the prede- 
termined data from the means for executing the LOCK 
routine and wherein the preset value is received at in- 



sor instructions which is executed before executing 10 puts connected to receive logic signals equivalent to the 



15 



20 



an application program instruction stored in the 
memory and (ii) a LOCK routine of processor 
instructions which is executed after executing an 
application program instruction stored in the mem- 
ory; 

first decoding means responsive to a selected address 
for generating a comparison enable signal; 

comparison means responsive to the comparison en- 
able signal and responsive to predetermined data 
that matches a preset value to generate a memory 
addressing enable signal to the decoding means; 

second decoding means responsive to the memory 
addressing enable signal and an address within the 
selected range to generate a memory circuit con- 
trol signal that allows writing of data to the limited 25 
access portion of memory; 

means for executing the UNLOCK routine of instruc- 
tions, including means for generating the selected 
address to the first decoding means and for gener- 
ating the predetermined data to the comparison 30 
means to activate the second decoding means; and 

means for executing the LOCK routine of processor 
instructions, including means for generating a sec- 
ond occurrence of the selected address to the first 
decoding means to produce a second occurrence of 35 
the comparison enable signal, said means also trans- 
mitting data other than the predetermined data to 
the comparison means to partially disable the sec- 
ond decoding means and prevent further writing of 
data to the limited access portion of memory with- 40 



preset value. 

9. The circuit of claim 6, wherein the comparison 
means includes means for latching the memory address- 
ing enable signal in response to the comparison means 
receiving the predetermined data that matches the pre- 
set value, wherein the means for latching unlatches the 
memory addressing enable signal in response to the 
comparison means receiving data that does not match 
the preset value. 

10. A method of limiting access to a memory by a 
processor during execution of an application program, 
the method comprising: 

in preparation for performing an application program 
operation, executing a first processor instruction 
with a predetermined address and predetermined 
data to activate decoding circuitry which controls 
writing of data to a limited access portion of the 
memory; 

executing at least one processor instruction to carry 
out the application program operation, including a 
processor instruction for generating addresses and 
control signals to the decoding circuitry to write 
data to the limited access portion of memory; and 

after the application program operation, executing a 
further processor instruction with predetermined 
address and predetermined data to disable the de- 
coding circuitry and prevent writing of data to the 
limited access portion of the memory. 
***** 
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